What is the California Privacy Rights Act?
The California Privacy Rights Act (CPRA) expanded the California Consumer Privacy Act (CCPA), giving California residents additional rights over how businesses collect, use, and share their personal information.
Approved by California voters in 2020, the CPRA became fully effective on January 1, 2023. It introduced new consumer protections, expanded business responsibilities, and established the California Privacy Protection Agency (CPPA) to oversee and enforce California's privacy laws.
Today, many people still refer to California's privacy law simply as the "CCPA," but the current law includes the changes introduced by the CPRA.
What changed under the CPRA?
The CPRA introduced several important updates, including:
• Additional consumer privacy rights.
• New protections for sensitive personal information.
• The right to correct inaccurate personal information.
• Expanded responsibilities for businesses handling personal data.
• Increased oversight through the California Privacy Protection Agency (CPPA).
• Updated requirements related to data sharing and retention.
These changes strengthened California's existing privacy framework while giving consumers greater control over their personal information.
What does this mean for website owners?
Businesses subject to California's privacy laws should review how their websites collect and process visitor information.
Depending on your business and the technologies used on your website, this may include:
• Reviewing your Privacy Policy.
• Evaluating third-party tracking technologies.
• Managing cookies and visitor consent.
• Providing methods for consumers to exercise their privacy rights.
• Understanding how analytics, advertising, and other services collect information.
Many businesses also choose to implement a Consent Management Platform (CMP) and configure Google Consent Mode as part of their broader privacy strategy.
Does every business have to comply?
Not necessarily.
The CPRA generally applies to certain for-profit businesses that meet specific thresholds established under California law. Whether your business is subject to these requirements depends on factors such as revenue, the amount of personal information processed, and other legal considerations.
If you're unsure whether the CPRA applies to your organization, consult qualified legal counsel for guidance.
Related resources.
• California Privacy Rights Act (CPRA)
• California Consumer Privacy Act (CCPA)
• Cookie Consent
• Google Consent Mode
• Privacy Resource Center
What does this mean for your website?
Every website is different.
Some organizations may only need to review their privacy policies. Others may benefit from implementing a Consent Management Platform (CMP), configuring Google Consent Mode, reviewing third-party technologies, or updating how visitor information is collected.
Understanding which privacy requirements apply depends on your business, your website, and the technologies you use.
How One Eleven Web Design can help.
We help businesses understand what technologies are installed on their websites and implement privacy-focused technical solutions.
Our services include:
• Website privacy reviews
• Consent Management Platform (CMP) implementation
• Google Consent Mode configuration
• Cookie and tracking technology reviews
• Ongoing website privacy management
We focus on the technical implementation while working alongside your legal or compliance advisors when appropriate.
Need help implementing privacy best practices?
Whether you're updating your website's privacy policy, implementing cookie consent, or configuring Google Consent Mode, we're here to help you navigate the technical side of website privacy.
Schedule a Privacy Review →
Legal notice
One Eleven Web Design helps businesses implement website privacy and accessibility solutions, but we are not a law firm and do not provide legal advice. The information in this Resource Center is provided for general educational purposes only. Because privacy laws, regulations, and court decisions continue to evolve, businesses should consult qualified legal counsel regarding their specific compliance obligations.
